Struct ApiKeyRecord 

pub struct ApiKeyRecord {
    pub id: Uuid,
    pub key_hash: String,
    pub key_prefix: String,
    pub user_id: String,
    pub name: String,
    pub scopes: Vec<String>,
    pub created_at: DateTime<Utc>,
    pub expires_at: Option<DateTime<Utc>>,
    pub last_used_at: Option<DateTime<Utc>>,
    pub revoked: bool,
}

An API key record stored in the database

Fields

id: Uuid

Unique key ID (not the actual key)

key_hash: String

Argon2id hash of the API key (includes salt, never store plaintext)

key_prefix: String

First 12 characters of key for identification (safe to show)

user_id: String

User ID this key belongs to

name: String

Human-readable name for the key

scopes: Vec<String>

Scopes/permissions granted

created_at: DateTime<Utc>

When the key was created

expires_at: Option<DateTime<Utc>>

When the key expires (None = never)

last_used_at: Option<DateTime<Utc>>

When the key was last used

revoked: bool

Whether the key is revoked

Implementations

impl ApiKeyRecord

pub fn new( user_id: &str, name: &str, scopes: Vec<String>, expires_in_days: Option<u32>, ) -> (Self, String)

Create a new API key record (does not store it) Returns (record, plaintext_key) - the plaintext key is only available once!

pub fn hash_key(key: &str) -> String

Hash an API key for secure storage using Argon2id with random salt Returns the PHC-formatted hash string (includes salt)

pub fn verify_key(plaintext_key: &str, stored_hash: &str) -> bool

Verify a plaintext key against a stored Argon2id hash Uses constant-time comparison to prevent timing attacks

pub fn is_valid(&self) -> bool

Check if this key is valid (not expired or revoked)

pub fn has_scope(&self, scope: &str) -> bool

Check if this key has a specific scope

Trait Implementations

impl Clone for ApiKeyRecord

fn clone(&self) -> ApiKeyRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApiKeyRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ApiKeyRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ApiKeyRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.